Error: rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
File:                     CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft (raw, json)
Hash identifier:          7YBFJIWhowah7WeWe8uUGa1Oa+0P7iGHhUj4mY9d3D4=
Subject key identifier:   06:39:05:C4:9D:51:84:23:31:43:A3:C6:2E:1D:27:D2:1C:4B:C7:23
Authority key identifier: 08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5
Certificate issuer:       /CN=F366C09ARI/serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
Certificate serial:       F6
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
Manifest number:          F5
Signing time:             Sun 27 Sep 2026 05:25:32 +0000
Manifest this update:     Sun 27 Sep 2026 05:25:31 +0000
Manifest next update:     Tue 29 Sep 2026 05:25:31 +0000
Files and hashes:         1: CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl (hash: bLWfktePhxN6klc9CgKtyzxwJIVrww5O9zsQZ5lLWZM=)
                          2: 60B3D06A00F411F1AD3841F3DAE4EC9C.roa (hash: /YeTGPkgq6IrMHXTQlAMTAiQfLyi9ZfWhHpJyJlkfy0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
                          rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C09ARI, serialNumber=081BBE7DFF4CD10D5A82FB7A696A94D5D4C6AEF5
        Validity
            Not Before: Sep 27 05:25:31 2026 GMT
            Not After : Sep 29 05:25:31 2026 GMT
        Subject: CN=6ab8a8cc-1be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:25:40:07:28:86:70:ed:98:16:23:82:2d:
                    8c:7f:74:16:49:d3:4a:69:a1:46:26:80:c2:aa:ab:
                    7d:74:b0:30:f7:66:7d:c2:0f:13:6a:60:2f:20:35:
                    95:fc:91:62:10:e4:4d:e7:f3:3c:4b:cf:06:08:b8:
                    25:b5:04:78:0d:b8:94:d8:b1:11:43:4e:24:0a:06:
                    e0:5d:f2:a3:7f:47:ff:43:b0:e3:37:8d:92:f2:e3:
                    3e:a0:47:13:82:6d:12:24:28:98:9a:77:0d:9c:2e:
                    c9:32:2f:87:85:7e:01:89:fc:56:39:44:1d:86:38:
                    6c:e9:8a:9d:3b:75:f1:5b:cb:c6:d5:46:76:d9:fa:
                    bf:40:0d:47:28:29:7e:e4:0e:70:6d:69:0d:be:58:
                    e3:3a:a4:5a:04:27:01:49:ea:5b:e1:e0:91:eb:fa:
                    f1:bd:f3:a8:2c:9a:f4:c2:20:f5:08:ce:92:28:62:
                    76:6f:4d:e6:bf:0e:2c:d6:34:0e:2e:67:48:79:61:
                    bf:de:a1:72:6e:67:90:e0:69:0e:93:5f:e0:9e:2d:
                    2c:c5:d3:55:74:74:82:24:1c:49:e4:49:f9:4b:2c:
                    9c:17:49:05:88:d6:a5:02:60:bb:67:16:99:67:05:
                    b2:87:02:3b:c1:d0:7a:dc:b4:99:5c:a4:3c:43:8c:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:05:C4:9D:51:84:23:31:43:A3:C6:2E:1D:27:D2:1C:4B:C7:23
            X509v3 Authority Key Identifier:
                keyid:08:1B:BE:7D:FF:4C:D1:0D:5A:82:FB:7A:69:6A:94:D5:D4:C6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C09A/57896126FC2111F0B4B937CBDAE4EC9C/CBu-ff9M0Q1agvt6aWqU1dTGrvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:79:95:84:2b:63:5a:ec:55:e2:32:cf:96:b5:46:15:3f:
         16:2e:5d:30:0b:11:b9:d2:9b:3f:64:f3:bc:00:a7:98:02:e5:
         4c:15:68:ac:f9:8f:e2:2d:5e:19:bf:d9:c8:24:fa:b5:95:d5:
         93:68:54:89:bc:0d:e1:bf:39:87:2b:07:43:64:81:81:43:29:
         d6:c2:e6:09:79:b9:74:dd:53:06:4d:7b:10:97:6f:f5:0d:c6:
         44:97:04:0f:3f:f9:b3:b0:db:71:d5:76:79:f5:07:17:30:bb:
         29:b1:4d:18:40:46:d3:21:0f:88:cb:4c:a5:6f:91:fe:56:be:
         7d:b6:40:7f:01:a1:4c:c9:1d:84:93:d0:54:64:8c:4a:36:a7:
         4e:73:2e:b7:b9:25:56:d1:0d:bb:57:d2:c8:9a:45:00:b4:a7:
         90:a1:70:d3:b0:78:9c:d8:f2:25:54:d8:aa:a6:b4:f3:46:d3:
         14:1a:a3:92:74:8a:f4:ff:10:ec:60:e1:39:ac:38:25:fb:fc:
         69:3d:eb:11:24:72:89:e3:38:0b:ef:fd:9f:9f:1b:30:4e:4e:
         49:9e:2b:ab:0b:7d:51:ed:2f:28:61:82:cc:15:ee:05:63:59:
         79:02:6d:20:3a:f2:01:07:e5:04:e7:84:19:f2:2e:3f:26:e4:
         48:69:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:37:52 2026 by rpki-client